JSP & Java 实现 Token (without use Struct)--控制刷新(F5) 和回格(Backspace)

rainliu

浏览: 78524 次
性别:
来自: 广州

最近访客更多访客>>

keimon

denylin

ybfjavaeye

A22227a

博主相关

博客

微博

相册

留言

关于我

文章分类

社区版块

存档分类

博客分类：

Java

1. JSP Setting as below:

  <body>

  <form id ="fromName" ...>

  ...

  <input type="hidden" id="htmlTOKEN" name="htmlTOKEN" value="${htmlTOKEN}"/>

  ....

 </form>

 ....

2. Java (Constants) -- CommonConstants.java

public class CommonConstants {
    .....
    public static final String TRANSACTION_TOKEN_KEY = "actionTOKEN";
    public static final String TOKEN_KEY = "htmlTOKEN";
   ......
}

3. Java (Token method) -- Named as TokenProcessor.java

import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;

import com.requestprocessing.WorkContext;
import com.requestprocessing.servlet.ServletWorkContext;
import com.common.module.CommonConstants;

public class TokenProcessor
{

    private static TokenProcessor instance = new TokenProcessor();
    private long previous;
    protected TokenProcessor()
    {
    }

    public static TokenProcessor getInstance()
    {
        return instance;
    }

    public synchronized boolean isTokenValid(WorkContext oCTX, String action)
    {
    	if(action == null){
    		return isTokenValid(oCTX, false);
    	}else{
    		return isTokenValid(oCTX, action, false);
    	}
    }

    public synchronized boolean isTokenValid(WorkContext oCTX, boolean reset)
    {
    	if(oCTX == null){
    		return false;
    	}
    	    	
    	String saved = (String)oCTX.getUserData(CommonConstants.TRANSACTION_TOKEN_KEY);
    	if(saved == null){
    		return false;
    	}
    	if(reset){
    		resetToken(oCTX);
    	}
    	
    	String token = (String) oCTX.getRequestParameter(CommonConstants.TOKEN_KEY);
    	if( token == null || ("").equals(token)){
    		//return false;
    		return true;
    	}else{
    		return saved.equals(token);
    	}       
    }

    public synchronized boolean isTokenValid(WorkContext oCTX, String action, boolean reset)
    {
    	if(oCTX == null){
    		return false;
    	}
    	    	
    	String saved = (String)oCTX.getUserData(action + CommonConstants.TRANSACTION_TOKEN_KEY);
    	if(saved == null){
    		return false;
    	}
    	if(reset){
    		resetToken(oCTX, action);
    	}
    	
    	String token = (String) oCTX.getRequestParameter(CommonConstants.TOKEN_KEY);
    	if( token == null || ("").equals(token)){
    		//return false;
    		return true;
    	}else{
    		return saved.equals(token);
    	}       
    }
    
    public synchronized void resetToken(WorkContext oCTX)
    {
    	if(oCTX == null){
    		return;
    	}else{
    		oCTX.removeUserData(CommonConstants.TRANSACTION_TOKEN_KEY);
    		return;
    	}
    }
    
    public synchronized void resetToken(WorkContext oCTX, String action)
    {
    	if(oCTX == null){
    		return;
    	}else{
    		if(action == null){
    			oCTX.removeUserData(CommonConstants.TRANSACTION_TOKEN_KEY);
    		}else{
    			oCTX.removeUserData(action + CommonConstants.TRANSACTION_TOKEN_KEY);
    		}
    		return;
    	}
    }

    public synchronized void saveToken(WorkContext oCTX)
    {    	
        String token = generateToken(oCTX);
        if(token != null){
            oCTX.putUserData(CommonConstants.TRANSACTION_TOKEN_KEY, token);
        	oCTX.putRequestData(CommonConstants.TOKEN_KEY, oCTX.getUserData(CommonConstants.TRANSACTION_TOKEN_KEY));
        }  
    }
        
    public synchronized void saveToken(WorkContext oCTX, String action)
    {    	
        String token = generateToken(oCTX);
        
        if(token != null && action == null){
        	oCTX.putUserData( CommonConstants.TRANSACTION_TOKEN_KEY, token);
        	oCTX.putRequestData(CommonConstants.TOKEN_KEY, oCTX.getUserData(CommonConstants.TRANSACTION_TOKEN_KEY));
        }else{
            oCTX.putUserData(action + CommonConstants.TRANSACTION_TOKEN_KEY, token);
        	oCTX.putRequestData(CommonConstants.TOKEN_KEY, oCTX.getUserData(action + CommonConstants.TRANSACTION_TOKEN_KEY));
        }
    }


    public synchronized String generateToken(WorkContext oCTX)
    {
    	HttpServletRequest request = ((ServletWorkContext)oCTX).getHttpServletRequest();
        HttpSession session = request.getSession();
        return generateToken(session.getId());
    }

    public synchronized String generateToken(String id)
    {
        MessageDigest md;
        long current = System.currentTimeMillis();
        try{
        	if(current == previous)
        		current++;
        	previous = current;
        	byte now[] = (new Long(current)).toString().getBytes();
        	md = MessageDigest.getInstance("MD5");
        	md.update(id.getBytes());
        	md.update(now);
        	return toHex(md.digest());

        } catch (IllegalStateException e) { 
            return (null); 
        } catch (NoSuchAlgorithmException e) { 
            return (null); 
        } 
    }

    private String toHex(byte buffer[])
    {
        StringBuffer sb = new StringBuffer(buffer.length * 2);
        for(int i = 0; i < buffer.length; i++)
        {
            sb.append(Character.forDigit((buffer[i] & 0xf0) >> 4, 16));
            sb.append(Character.forDigit(buffer[i] & 0xf, 16));
        }

        return sb.toString();
    }
}

4. Java BaseProcessor (BaseProcessor.java)

public class BaseProjectRoomProcessor {
   ......
   public String process(WorkContext oCTX){
   ......
   }


    protected boolean validateToken(WorkContext oCTX, String action){
        TokenProcessor token = TokenProcessor.getInstance();
        if(!token.isTokenValid(oCTX, action)){
        	token.resetToken(oCTX, action);
        	return false;
        } else {
        	token.saveToken(oCTX, action);
        	return true;
        }
    }
}

5. Java BaseResponseProcessor (BaseResponseProcessor.java)

public class BaseProjectRoomResponseProcessor{
   ......
   public String process(WorkContext oCTX){
   ......
   }
    protected void initToken(WorkContext oCTX, String action){
    	String tokenId = null;
    	TokenProcessor token = TokenProcessor.getInstance();
    	if(action == null){
    		tokenId = (String)oCTX.getUserData(CommonConstants.TRANSACTION_TOKEN_KEY);
            if(tokenId == null){
            	token = TokenProcessor.getInstance();
            	token.saveToken(oCTX);
            	oCTX.putRequestData(CommonConstants.TOKEN_KEY, oCTX.getUserData(CommonConstants.TRANSACTION_TOKEN_KEY));
            }else{
            	oCTX.putRequestData(CommonConstants.TOKEN_KEY, oCTX.getUserData(CommonConstants.TRANSACTION_TOKEN_KEY));
            }
    	}else{
    		tokenId = (String)oCTX.getUserData(action + CommonConstants.TRANSACTION_TOKEN_KEY);
            if(tokenId == null){
            	token = TokenProcessor.getInstance();
            	token.saveToken(oCTX, action);
            	oCTX.putRequestData(CommonConstants.TOKEN_KEY, oCTX.getUserData(action + CommonConstants.TRANSACTION_TOKEN_KEY));
            }else{
            	oCTX.putRequestData(CommonConstants.TOKEN_KEY, oCTX.getUserData(action + CommonConstants.TRANSACTION_TOKEN_KEY));
            }
    	}
    	
    }
}

6. Java YourResponseProcessor (YourResponseProcessor.java)

public class XXXXResponseProcessor extends BaseResponseProcessor {
......
......
protected String doAction(WorkContext oCTX) throws Exception {
......


        if (xxxx) {        	
              	this.initToken(oCTX, "Your Action Name");
        }
......


}

7. Java YourActionProcessor(YourActionProcessor.java)

public class XXXXProcessor extends BaseProcessor{
......

......

protected String doAction(WorkContext oCTX) throws Exception {
.....
        String action = (String)oCTX.getRequestParameter(ProgressSummaryConstants.ACTION);
        if(!this.validateToken(oCTX, action)){ 
        	return ProgressSummaryConstants.DONE;
        }

......
}

分享到：

JS calendar in DHTML Suite for applicati ... | Form field tooltip

2012-07-04 18:42
浏览 5235
评论(0)
分类:编程语言
查看更多

发表评论

您还没有登录,请您登录后再发表评论

最近访客更多访客>>

博主相关

文章分类

社区版块

存档分类

最新评论

JSP & Java 实现 Token (without use Struct)--控制刷新(F5) 和回格(Backspace)

评论

发表评论

相关推荐

最近访客 更多访客>>

博主相关

文章分类

社区版块

存档分类

最新评论

JSP & Java 实现 Token (without use Struct)--控制刷新(F5) 和 回格(Backspace)

评论

发表评论

相关推荐

HTTPClient

Export To Excel - Testing

Export To Excel - ExcelUtils.java [Version 0.2]

Export To Excel - Action Oupt Excel

Export To Excel - ExcelUtils.java

Export To Excel - ExcelDAO.java

Export To Excel - commonExcelStyle.css

Export To Excel - ExcelConstants.java

Export To Excel - ExcelRowList.java

Export To Excel - ExcelRowItem.java

Export To Excel - ExcelInfo.java

Export To Excel - ExcelColList.java

Export To Excel - ExcelColItem.java

Export To Excel - ExcelCellItem.java

Util

DMSUtil

PooledConnectionManager

FloatValidator

XmlHelper

XMLEncode

最近访客更多访客>>

JSP & Java 实现 Token (without use Struct)--控制刷新(F5) 和回格(Backspace)